Requirements will set the framework for security. Personally, I have also seen many apps use wget to grab updates via a daily cron job.